# Pharmaceutical wholesaler: €20,000  fine

- Type: Enforcement
- Source: French Data Protection Authority (CNIL)
- Date: 2024-01-24
- Original: https://www.enforcementtracker.com/ETid-2415
- Canonical: https://overview.legal/posts/48530
- Topics: Accountability, Processing Agreement, Controllers, Processors, Processing, Supervisory Authorities, Security, Data Processor, Access Controls, Data Controller

## Summary

The French DPA has imposed a fine of EUR 20,000 on a pharmaceutical wholesaler due to violations of several regulations, including a lack of data security and insufficient cooperation with the DPA. Additionally, deficiencies were found regarding the maintenance of the record of processing activities, and the obligation to use only processors providing sufficient guarantees and assigned after authorization by the controller was not met.

## Full text

The French DPA has imposed a fine of EUR 20,000 on a pharmaceutical wholesaler due to violations of several regulations, including a lack of data security and insufficient cooperation with the DPA. Additionally, deficiencies were found regarding the maintenance of the record of processing activities, and the obligation to use only processors providing sufficient guarantees and assigned after authorization by the controller was not met.

GDPR Articles: Unknown
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/48530 · 2026-08-22